| CVE-2026-104939 |
Description
NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress
|
7.5
Élevée
|
14 oct. 2026 |
| CVE-2026-94197 |
An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when…
|
7.5
Élevée
|
14 oct. 2026 |
| CVE-2026-77180 |
When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the…
|
8.3
Élevée
|
2 sept. 2026 |
| CVE-2026-52865 |
When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with…
|
6.5
Moyenne
|
15 juil. 2026 |
| CVE-2026-55723 |
When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an injection…
|
8.3
Élevée
|
15 juil. 2026 |
| CVE-2025-14727 |
NGINX Ingress Controller vulnerability
|
8.3
Élevée
|
17 déc. 2025 |
| CVE-2024-10318 |
A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not…
|
5.4
Moyenne
|
6 nov. 2024 |
| CVE-2022-30535 |
In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can…
|
6.5
Moyenne
|
4 août 2022 |